Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/4ca610d2-b410-3eaa-a4a3-ff161a44fe95.roa
File:                     4ca610d2-b410-3eaa-a4a3-ff161a44fe95.roa (raw, json)
Hash identifier:          MwtKsEkTpzAP7jxKWm16unXbDJ10cizVbTZ/2RQ3kpw=
Subject key identifier:   59:8E:95:DE:96:36:C1:F9:89:98:2A:97:2A:2D:7D:53:81:CE:A5:72
Certificate issuer:       /CN=73c38a7d-2b5c-432c-9da0-79bcf96780c3
Certificate serial:       010D0C9F4328584E9D4AB89A2DEBE677A88C0960
Authority key identifier: 92:6D:02:56:A1:1D:28:99:4E:BB:2C:91:8B:9D:BD:F0:34:78:CC:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/4ca610d2-b410-3eaa-a4a3-ff161a44fe95.roa
Signing time:             Sat 25 Jul 2026 09:00:11 +0000
ROA not before:           Sat 25 Jul 2026 09:00:11 +0000
ROA not after:            Fri 23 Oct 2026 09:00:11 +0000
asID:                     6079
IP address blocks:        172.111.58.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/73c38a7d-2b5c-432c-9da0-79bcf96780c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/73c38a7d-2b5c-432c-9da0-79bcf96780c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 29 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9d:4a:b8:9a:2d:eb:e6:77:a8:8c:09:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73c38a7d-2b5c-432c-9da0-79bcf96780c3
        Validity
            Not Before: Jul 25 09:00:11 2026 GMT
            Not After : Oct 23 09:00:11 2026 GMT
        Subject: CN=4aacc30a-d470-4c94-a0ab-515722c790c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:ad:88:2b:52:d5:7c:bd:f9:77:f5:ab:91:0d:
                    5f:f3:2e:f4:a9:81:a9:18:7c:df:22:47:33:92:f1:
                    46:5a:29:e2:40:cb:ad:7b:c8:e4:50:d4:11:51:93:
                    48:b9:14:16:69:fd:bb:00:10:2a:fc:77:2e:f0:c1:
                    4e:17:5b:b9:02:3a:ad:99:db:d9:61:63:27:6c:d3:
                    0b:f4:1c:ec:0b:65:c7:56:09:ae:db:3d:60:a3:dd:
                    d3:8a:ac:12:e1:32:67:06:7a:2f:9f:a9:53:51:4f:
                    64:72:00:0f:2a:0b:a4:77:cb:ff:7e:75:d1:71:ec:
                    c9:23:2b:e6:84:4f:12:e1:19:6e:e8:3c:8b:44:23:
                    80:6b:5b:7f:db:43:39:ff:a2:3a:c5:23:bf:80:79:
                    c7:7f:34:68:fd:20:49:0a:e9:b3:88:b4:9d:55:a6:
                    a9:a2:c2:f2:d3:a4:da:00:e2:87:da:ea:1f:fd:73:
                    fe:51:99:73:56:63:c9:60:f4:2c:c3:11:32:da:51:
                    40:b4:e1:44:91:9b:98:89:41:11:42:9d:f7:4f:91:
                    cd:a8:83:8c:2a:6e:b5:8f:59:64:f7:e6:ea:f0:40:
                    da:44:7b:f0:98:b0:de:6b:5b:01:e0:d5:3e:0c:ea:
                    cf:a6:ec:27:68:01:10:8c:e0:dc:68:63:7c:56:bd:
                    be:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:8E:95:DE:96:36:C1:F9:89:98:2A:97:2A:2D:7D:53:81:CE:A5:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/4ca610d2-b410-3eaa-a4a3-ff161a44fe95.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/73c38a7d-2b5c-432c-9da0-79bcf96780c3.crl

            X509v3 Authority Key Identifier:
                keyid:92:6D:02:56:A1:1D:28:99:4E:BB:2C:91:8B:9D:BD:F0:34:78:CC:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.111.58.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:77:05:1d:6d:e5:78:56:3b:c0:3e:45:9f:2c:38:c7:48:b6:
         19:3c:35:a6:74:15:23:41:8f:ae:d7:a6:44:01:ee:54:d7:d4:
         06:71:64:30:a6:d2:58:1a:99:fa:ca:2b:bb:ce:d3:d6:41:45:
         98:f2:c1:e8:5d:1f:ac:e9:77:1f:a6:9e:a1:80:53:90:0c:a7:
         89:6d:7c:83:e7:ac:cd:00:35:06:1a:84:a1:42:04:d6:a3:59:
         9d:f4:56:ec:eb:4c:8f:55:ea:4a:3b:bc:0f:5c:f2:4a:86:a9:
         2e:4b:f6:e6:67:e8:5b:3d:bb:1c:61:ed:ef:3b:09:1d:c0:8a:
         81:66:77:2c:20:d2:bd:b7:26:ee:f1:dc:60:87:0c:0a:93:bd:
         d5:fe:18:ea:6f:58:2d:e0:a0:ef:30:67:33:44:e1:6a:1e:e4:
         58:06:66:38:f0:17:0d:b9:a0:b2:72:87:05:ab:16:a7:67:03:
         46:81:db:6a:3a:10:1d:c1:d1:60:df:9e:7d:a6:5b:1f:7f:06:
         5c:19:7e:70:0b:b4:7f:9e:e7:f0:be:6f:81:d4:fa:a3:14:5d:
         6f:51:58:c8:97:f1:56:02:f4:e1:bb:77:06:8c:98:f4:60:c9:
         bf:b0:6a:61:b6:21:4f:4d:cb:c1:a4:7e:39:65:a7:d3:e8:db:
         73:97:b5:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:15:58 2026 by rpki-client